S 3097 · Federal · introduced Nov 4, 2025In Committee

S 3097

Health Information Privacy Reform Act

Medium RiskMay require changes to AI practices. Monitor and prepare.

TL;DR

Senator Bill Cassidy (R-LA) introduced this bill to update federal health information privacy rules, likely expanding protections beyond what HIPAA currently covers. It has cleared committee and sits on the Senate Legislative Calendar, meaning it could get a floor vote. Specific AI provisions are not detailed in the current summary, but any health data reform will affect how AI tools handle patient information.

How This Might Impact Your Business

Healthcare providers, insurers, and health tech vendors would likely face expanded privacy obligations beyond current HIPAA rules, including for data used to train AI models.

Companies building AI diagnostic tools, clinical decision support, or health chatbots may need new consent mechanisms before ingesting patient data.

Consumer wellness apps, wearables, and direct-to-consumer health platforms (currently outside HIPAA) could be pulled into federal privacy oversight for the first time.

Data brokers selling health-adjacent data (pharmacy purchases, fitness metrics, mental health app usage) would likely face new restrictions or disclosure requirements.

Health AI vendors serving hospitals should expect stricter downstream data use limits in business associate agreements.

The bill has cleared committee and is on the Senate calendar, meaning a floor vote could come with limited notice.

Penalties and effective dates are not yet public in this summary; monitor the enrolled text for compliance timelines.

What Should You Do

1

Ask your legal or compliance team to pull the full text of S 3097 and flag any provisions that expand covered entities beyond HIPAA.

2

Inventory every AI system in your organization that touches health, wellness, biometric, or medical data, including third-party vendors.

3

If you run a consumer health app or wearable, prepare a briefing on how a HIPAA-style federal privacy regime would change your consent flows and data monetization.

4

Review AI training data sources for health information that may soon require explicit patient consent or de-identification.

5

Track the Senate floor calendar and set an alert for movement on Calendar No. 538.

Who It Affects

Healthcare ProvidersHealth InsuranceDigital Health and TelemedicineHealth AI and Clinical Decision SupportConsumer Wellness Apps and WearablesData Brokers

Sponsors

Status Timeline

  1. committee

    Placed on Senate Legislative Calendar under General Orders. Calendar No. 538.

    August 4, 2026

AI-generated analysis for informational purposes only. Not legal advice. Always consult a qualified attorney for legal guidance.Last action Aug 4, 2026

Need help preparing your team for AI compliance?

Talk to LaunchReady about AI Training

Get the Weekly AI Law Roundup

Plain-English summaries of the AI laws that matter for your business. Every Monday. Free.

No spam. Unsubscribe anytime.